News for the weeks of April 27 and May 4, 2026: Rust ports galore, Remix 3 is ready to rumble, and lots of security PSAs that are breaking the Internet. From the community: boring web dev, cross-framework templating with TSRX, and TypeScript features wishlist.

Sponsored by Excalibur.js
Excalibur.js is the free and open source friendly TypeScript 2D game engine for the web. Learn to make web games with TypeScript or JavaScript! Excalibur comes out-of-the-box with everything you need, like physics, sprites, animations, sound effects, and first-party plugins for popular 2D gamedev tools.

• Homepage and Docs: https://excaliburjs.com
• Make Your First Game in 10 Minutes
• Join the Discord: https://discord.gg/9UemP985Uy

Chapters

• (00:00) - Welcome to the Show

News

• tsz vibe-port of Go compiler to Rust
• Bun experimental Rust port
• pnpm port to Rust officially called pacquet
• Astro 6.3 
• Remix 3 Beta Preview 
• Introducing the Nuxt Agent
• SvelteKit: Now Supports TS 6.0 
• Node.js 26.1.0 (Current) 
• New in Chrome 148, the controversial Prompt API
• Behind the Scenes Hardening Firefox
• PSA: Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
• PSA: TanStack Packages Compromised
• PSA: Linux exploits, Copy Fail and Dirty Frag, including WSL2 on Windows
• PSA: React and Next.js Hit With 12 Security Flaws — Three Let Attackers Bypass Auth, Hijack Servers
• PSA: vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution
• PSA: cPanel & WHM Authentication Bypass CVE-2026-41940

Library Watch

• Laravel TS Annotations 
• Motion.dev – Effortless Animation For The Web
• Temper: Cross-language *libraries* with Temper: Interview
• Wavedash for multiplayer apps 
• Flue: TypeScript agent harness, BYOM and build your own agents

From the Community

• Chad Loder: Zork in TypeScript+React 
• Ryan Carniato: Exploring TSRX w/ Dominic Gannaway
• André Klein: I Went Back to Boring Web Dev, and I'm Not Sorry
• Cinnamon: Feedback for TypeScript 
• Jonathan Bones: JSON.parse vs JSON.stringify date handling
• Bleet of the week

Cool Links

• Excalibur.js contributor Justin has a Shader Editor 
• I re-created the PSP 
• Exploring a New Approach to Realistic Lighting: Radiance Cascades 
• Inside Out Money podcast – if you like friends yapping about money

Music
Seahorse Dreams by Kubbi (Spotify)